Installing Zerotier OSS package was easy. Only allowing API access from management interface needs the following config.