Modify rules in iptables and nftables to accept all traffic not from netbird network but routed through it.
Update the client's engine to apply firewall rules received from the manager (results of ACL policy).