Tunnel must not be active by default.

After applying this commit new users registering will have to manually activate the VPN tunnel service through their profile page.