Check out tuntap using https

Since this does not specify a specific revision, there is no
verification at all, so https adds at least a little trust.