It provides an in-process AmneziaWG adapter for the narrow wg-embed API used
by the access server. The Linux implementation creates a TUN and AmneziaWG
device directly and calls Device.IpcSet/Device.IpcGet; it does not spawn a
daemon or use a UAPI socket.