VPN access

[getchoo]

Keys aren't very fun to manage, and we use oauth for most other things -- why not use it for our machines?

Tailscale and Zerotier are the main options afaik. I think the former may be better since it easily integrates with GitHub accounts and can replace sshd (can Zerotier do that too? I dunno actually)