good, as I shot myself in running my netmaker instance on the subnet I want to whitelist on the egress server, so it "thinks" that all traffic for that subnet needs to go over wirewguard 😛