Stuck at Bringing WireGuard up

Hello I was thinking of creating a multi platform application on wush (just thinking , I liked magic wormhole but its golang library was a bit rough and I really liked golang and like your project's approach)
On offtopic I was the author to (https://news.ycombinator.com/item?id=38876954) so I have had a keen interest in this space

Since wush uses wireguard and wireguard needs root access , I found that there is this wireguard compliant non root alternative called wiretap (https://github.com/sandialabs/wiretap)which could allow the server to run rootlessly and also wireproxy (https://github.com/pufferffish/wireproxy)
which could connect to clients rootlessly (or maybe wiretap can do that as well)

Anyhow adding this support could be really interesting
I did somewhere hear that tailscale can be configured in a non rootless device as when I was looking at wireproxy and the likes. some people said that something like this could work directly in headscale , so please look into that as well..

I hope that you could look into these matters.