So I don't need root permission or kernel networking stuff setup.
(I do run Wireguard, it just feels like sometimes a VPN is a sledgehammer to solve a port forwarding problem)