It is possible for the guest vpn to run out of file descriptors under strain. We should try to make this less likely/impossible.