better messages
Find a way to open the tun device in a separate priviledged process.
A little programm is executed with sudo, opens the tun device and
passes the descriptor back to the main programm.  Unfortunately
closefrom_override must be set in the sudoers config.
Build Perl .xs module.