Ensure that the tunnel match is also protected by NO_FORBIDDEN.

+ Non-author changes to origial patch:

  * Added back the deleted blank line (minus the whitespace)
  * Surrounding whitespace deleted.
Don't use anything with PIDs in HAVE_FORK.
Protect a function by NO_FORBIDDEN.

+ Non-author changes to origial patch:

  * Whitespace deleted.
Minor fix for object.c