net/mlx5: reject tunnel ID modification