important note: abstraction/pasta already has a rule for the tun device. but abstractions/passt does not. but the two abstractions look very similar.