all wireguard traffic is encrypted