net/ice/base: add reference count to tunnels