should netmaker also be able to work over cgnat?