never ignore a (potential) tunnel failure, even though the tunnel may not have failed

(e.g. test outbound through A with a reply inbound through B.  if the message is lost, which tunnel failed?  both!)