Wireguard MFA/2FA


https://tailscale.com/kb/1035/wireguard/

single sign-on (SSO), 2-factor/multi-factor authentication (2FA/MFA), NAT traversal, TCP transport, and centralized Access Control Lists (ACLs).