Userspace proxy on a Tailscale node that is also a public VPS: bind the tailnet IP, never all interfaces
tailscale socks5 proxy security microsocks 295 tokens
CLI tools with multi-step SSH workflows need transactional rollback and idempotent remote setup
python cli ssh git tailscale 637 tokens