These approaches work (and I use one myself in addition to a group VPN) but remember, if you roll your own, you lose any/all plausible deniability for sure.