so WG can connect two hosts behind CGNAT?