but if we allowed it with netmaker, as written, all traffic, including private address space, would go through the iface, and everything pretty much breaks