Denying tunnel requests that dont come from /debug/tunnel.