that's basically what we had, a wg management tunnel. But it would still need to be updated sometimes which caused issues