Nothing matches “#rule-based tunnel”. Apps have to carry every tag you picked, so try dropping one.