[secure]

You can prototype/test the feature by calling tc (interactively via https://github.com/gokrazy/breakglass). Then, a good long-term solution is to reimplement what tc is doing in Go.