Simplify ferry() to just take FileDescriptors (no TapDevice)
Forbid assigning a FileDescriptor object (copies already forbidden)
Add a space after `if` (it's not a function)