wireguard: add handoff node