Variants of this question exist, but I can\'t seem to understand something.
If you read at the end of the features in ICS / 4.0, there is mention of
It's extremely unlikely that there is a way to create a VPN profile without root or system app privileges. You can take a look at how this is implemented in AOSP settings here.