Tailscale ACL testing
tailscale debug acl lets you test ACL rules locally before pushing to the admin console. Saved me from a lockout situation where I accidentally denied my own SSH access.
Always test ACLs against a {"src": "your-machine", "dst": "your-machine:22"} case before applying.