Is there a way to disable/disconnect netclient? I'd like to use this but would like the ability to not have the tunnel up unless I need it. I can always rejoin but that seems like overkill.

Not currently, but it's roadmapped and should be in the product in the next month.

That is great to hear.