Move migration traffic from WireGuard to the private network

Migration traffic uses the private IPv4 address by default, with a setting to move it back to WireGuard.