Ditch MACsec in favor of Tinc
We're having issues with MACsec because key rotation is either not implemented (the case of iproute2) or is flaky (the case of wpa_supplicant), so we decided to ditch it in favor of the Tinc setup we already have in place.