Each egress node would have to be in its own wire guard network