The patchfoo tunnel is really just a stopgap for me until a native soltion is available. it’s also a good option for no having the secret on the device, though.

re size: you really don’t need _everything_ locally all the time. You can delete unused blobs easily, which take up most of the space.

It’s all very implementation specific as well.