The tunnels I have defined with setkey start to
establish a tunnel after the first matching net
request. These first net requests fail (and maybe the
application too) due to the tunnel is not yet established.
Isn't it possible to have something like a stall proxy
to defer all connections needing a tunnel until it is
established and fail them if one of the phases fails?