Note: This currently requires a custom version of VPNKit. Signed-off-by: Rolf Neugebauer <rolf.neugebauer@docker.com>