Debian Packaging work for WireGuard:

 * consider make check for wg during build: this depends on
   scan-build, which is part of clang, but also wants to clean the
   build tree first.  Currently, we don't do any build-time tests.

 * autopkgtest -- can we test this effectively?
