If you want total control over key material then you might prefer to stay with vanilla WireGuard or self-host Headscale. But for most users who just want their private network to stay secure without ...