"We explored various methods to make these new features work with sandboxing restrictions of the App Store, but it seems that this is not possible."<p>I wonder if they tried using Docker's library/approach:<p><a href="https://github.com/docker/vpnkit" rel="nofollow">https://github.com/docker/vpnkit</a>
It doesn't look like this open source version supports EFI boot, can it boot macos/osx? I know they have an internal version that does support EFI.