datapath: Don't allow flows installed with only TUN_ID.