Got it. Was thinking of the network wide VPN for nextdns. Makes sense and more selective/ granular. Thanks!