Clients should always tunnel connections, and never fall back to a DirPort

Otherwise, client privacy might be compromised.