Merge "tun_device: enforce ioctl restrictions"