I already reported this issue upstream here https://github.com/palinek/nm-tray/issues/44
but for sake of follow-up I created this task.
tl;dr an already created VPN connection works ok if passwd is saved but nm-tray won't ask for password if needed and connection fail.
Workaround is to do it via command line with:
nmcli con up id VPN_ID --ask