Fix #15, use one executor for tunnel allowances.