I have a Wireguard VPN back to my work office. The config file contains the line "AllowedIPs = 10.0.0.0/16" such that only the 10.0.x.x subnet should go over the VPN. All other traffic should be route