check_vpn/openvpn: port check only if specified 'tcp' proto