Add partial support for RFC 2868.

- Add partial support for tunnel tags.
- Skip decoding of encrypted tunnel passwords to avoid utf-8 errors.
- Add methods to de-/encrypt tunnel passwords.