Wireguard client not honoring DNS setting [workaround discovered]