clear to private should result in no tunnel and full packet loss