We are in the process of switching from Hamachi to Meraki VPN by Cisco. Hamachi was managed internally, but this new VPN solution is managed by an external party and they have set it up as L2TP/IPsec with a pre-shared key and authentication. They insist on keeping the pre-shared key private, which means they have to set up the VPN for everyone in the company via TeamViewer.
This means I cannot easily set up VPN on my Linux dual boot or my phone whenever I want. Is it standard practice to keep the pre-shared key super secret or should users have access to the pre-shared key?