so you generate a per-subscriber ID though, have to for auth surely

or do you do it simple just provide a wireguard config? that's basically a secret key