I kind of think I am doing the opposite? Apart from rootkit and backdoors that are more difficult to install as non-root, you cannot build specific tunnels as

I kind of think I am doing the opposite? Apart from rootkit and backdoors that are more difficult to install as non-root, you cannot build specific tunnels as you don't have network permissions. There are some user space network capabilities, but they are easily breaking, or discovered and in general not resilient to simple reboots. This is one of the reasons you shouldn't leave your client 24/7 on.