kentonv: So you'd do the dance with /dev/tun, that'd spin up a tunnel netdev, and then you'd assign it to a grain.