FYI this also works to make Tailscale actually function as an exit node.
Also, paging @jsr to this thread.