protect the set-needTunnel of Request in package access