ENH: add process_group parameter, and fix tunnel documentation

I added a `process_group` parameter to allow for group and user names to be different.

Additionally, I fixed the docs in tunnel.pp, where you talk about a file `tunnel.conf.erb`, which doesn't exist.