This is what headscale does, right? Manage private logins and keys for your tailnet from a vps? I haven't played with it but seems straightforward