Key distribution and rotation tools?

[Jason A. Donenfeld]

The Mullvad people have this interesting repo:
https://github.com/mullvad/oqs-rs/tree/master/mullvad-wg-establish-psk

The idea is to run some slow and miserable post quantum key exchange
over TCP from inside the wireguard tunnel, and then pop the result
into the PSK slot on both ends.

It'd be interesting to see someone build something similar around the
recently released libpqcrypto - https://libpqcrypto.org