document tunnel parameters
bugfix: wrong option used for changing uid