yeah I need to get it running without disabling SIP. From a bit of reading it seems it will need 2 entitlements- one to run (load in RAM) and one for the dependancy on Wireguard