My minimal template had these:
gnome-keyring
network-manager
network-manager-openvpn
network-manager-openvpn-gnome
notification-daemon
openvpn
policykit-1
qubes-core-agent-network-manager
qubes-core-agent-networking
qubes-core-agent-passwordless-root
Note that, although installed, network manager was NOT running.