I have created a k3s cluster between two VM that do not belong to the same network. For that I open the needed ports only accepting traffic from the other node. I thought that it was safe, but it seems that the traffic between pods is being transferred in the internet without encryption, I tried the solution --flannel-backend=wireguard-native, but it crashed longhorn-system and other custom application. What is the easier way to have a safe traffic between the pods of the cluster?