IDEA: Make ucsf-vpn work without sudo?

[HenrikBengtsson]

From man openconnect:

-S,--script-tun
   Pass traffic to 'script' program over a UNIX socket, instead of to a kernel tun/tap device. This  allows
   the  VPN  IP traffic to be handled entirely in userspace, for example by a program which uses lwIP to
   provide SOCKS access into the VPN.

It would be interesting to explore whether this can be used to connect the VPN without requiring sudo. There might be other benefits from this approach too.