pure go implementation
Let's experiment with removing bitmaskd from the picture and implement it in go.
The needed pieces are:
- simple bonafide implementation. For now we can hardcode the ca.cert and just fetch the openvpn certificate.
- launch firewall/openvpn. This is platform dependent, for now we can just targed linux using the current python bitmask-root and polkit files.
- access openvpn control port. Maybe https://github.com/apparentlymart/go-openvpn-mgmt/ can help.