Hi, Does wireguard-go provide any facility in order to encapsulate and decapsulate WireGuard packets as they leave for and arrive from the remote peer? Or, am I just better off to use kernel implementation with a TUN device to handle en- and decapsulation and relaying? Cheers.