tunnel: change license to 2-clause BSD