By VPN startups, they mean initiation of a VPN session. Specifically, this means they can grab the credentials at the beginning of a PPTP VPN session, and then decrypt it. PPTP has been known to be vulnerable to this sort of attack for some time.