Assuming you're vpn client start script listen to nvram boot complete, from there you can:
- variant 1, buggy, sleep like 60 sec hopping ntp will update
- variant 2, less buggy, ntp update in the script, and continue after (eliminate original problem)
- variant 3. wait like 30s (or research...