I tried this a while ago in combination with tailscale, exposing the VPN as an exit node.