use an explicit channel to signal workers to stop as soon as a connection is established; distinguish explicitly closed (cancelled) tunnels for logging