haven't tested with boringtun but wireguard-go should work at least