create_tunnnel: Add option to set fail-mode=secure.

Signed-off-by: Yeqiao Wang <ee07b291@gmail.com>