feat: set 'AllowTcpForwarding yes' for ExL support to tunnel services to their local workstations for diagnosis