Question concerning docker perm flags with Wireguard

[middleagedman]

Is there a way you can integrate what linuxserver/wireguard did with not needing "privileged" mode enabled for wireguard? I.e. I can run this commandline and it will fire up a wireguard connection to my provider without issue. I'm trying to secure my docker containers. Thanks!

docker run -d
--name=wg-tunnel
-p 51820:51820
-v /etc/wireguard/config:/config
-v /etc/localtime:/etc/localtime:ro
--cap-add NET_ADMIN
--sysctl="net.ipv4.conf.all.src_valid_mark=1"
linuxserver/wireguard:latest