Revert tinc.pubkey to nullable but keep clean API (#157)

(partial) revert f7f43236