Nylon running in containers acting as relays do not need TUN, so we should be able to turn them off :)