our philosophy is sort of that the netclient acts as a configure-er for the tunnels, but that they should be functional without the netclient being involved