hiera.glob: fix wrong settings for :tunnel account