[tptacek]

How does that help us here? Without WireGuard, there's no channel with which you can talk to a Fly Hallpass instance, by design.

[xmodem]

Implement the userspace wireguard client and TCP stack as a ProxyCommand, make something useful for the general case of SSH'ing over wireguard.

[tptacek]

You can totally do that. The code is public, and for a simple TCP proxy, we're talking, maybe, a couple dozen lines.