yes, it could be run locally, but it could also be run remotely and thereby act also as a single purpose VPN.

it looks like there might be two of us working on this too, it's not really my idea, per se, and my friend has already started putting together the scaffolding.