Somewhat related -- with the project I work on, https://github.com/spr-networks/super https://github.com/spr-networks/super, we do support wireguard peers (and

Somewhat related -- with the project I work on, https://github.com/spr-networks/super https://github.com/spr-networks/super, we do support wireguard peers (and also support combining that wireguard identity with a wifi peer identity as well). Devices are provisioned by assigning or generating a wireguard keypair in the API. Next the peers are routed together by policy and by default can't access one another. There's support for bidirectional network groups or one-way firewall rules with NAT. One area of improvement is multicast support with wireguard, it's doable, just not ready yet.