`set interfaces wireguard wg0 peer ff endpoint <host:port>`
WireGuard is the only system that has both remote endpoint and port on the same node, this makes validation hard using outr standard validators.
CLI must be changed to have a unique remote and a unique port node - a migrator for this is required but it gives a better CLI experience