Twilight Sparkle

I ended up using this magic incantation to fix wireguard on Talos: ```yaml apiVersion: v1 kind: Namespace metadata: name: wireguard labels: pod-security.kubernetes.io/audit: privileged pod-security.kubernetes.io/audit-version: latest pod-security.kubernetes.io/enforce: privileged pod-security.kubernetes.io/enforce-version: latest pod-security.kubernetes.io/warn:...