wireguard has a kernel module so that it's faster