Add a unit ‘encrypted-links.target’ to stop/start all tunnels

Fixes #69.