option.tunnel to explicitly disable tunneling

some proxies don't support tunneling via CONNECT, so this provides an
option to ensure tunneling isn't used. Only affects anything if
`option.tunnel === false`.