also, stopping netclient via `systemctl stop netclient`does not clean up the tunnels, it leaves them running :P