Has anyone tried to use netclient with boringtun by chance? https://github.com/cloudflare/boringtun Looks like it might be an easy way to use it in lxc containers without giving them more permissions on the host.