Can we remove the need for --privileged altogether?

[rankun203]

Currently it's asking for --privileged, otherwise the server won't be fully connected to the VPN, requesting socks will still use client machine network.

openconnect supports --script-tun to tunnel its VPN traffic into another program, say https://github.com/cernekee/ocproxy