does the 'priority client' connect using a unique certificate? if so, then you can either use the far end of your 'server' range or you can even set up a separate range for the 'client-config-dir' clients; for example, if you use
server 192.168.11.0 255.255.254.0
(note the 4) and assign the 'priority clients' IPs from the network range 192.168.12.0 then the regular clients will not likely overlap with them.
It's even possible to separate things even further, for which I'll gladly refer you to my book 😉