Experimental 9front wireguard implementation

Features:
	* Barely tested

Missing:
	* proper review

Obligatory "do not trust this it will eat your homework and piss on your rug."

Config:
	For now the system relies on a "mainline" wg.conf:
	[Interface]
	PrivateKey = KEY
	ListenPort = 51280

	[Peer]
	PublicKey = KEY
	AllowedIPs = 192.168.67.0/24, 192.168.69.0/24
	Endpoint = 1.2.3.4:51280
	[Peer]
	...

Use:
	# generate new keys
	% ip/wg -g
	PrivateKey = <KEY>
	PublicKey = <KEY>
	# ip and mask are for new ipifc 'inside' the vpn
	% ip/wg -c wg.conf 192.168.67.67 255.255.255.0