Iptables rules for tunneler

It looks like the tunneler still adds by default udp and tcp rules for the same port even though the service is configured as TCP. According to the source code, this is no longer hardcoded as it was v0.5 and it is passed as a variable. Am I reading this correctly?

...
interceptAddr, err := intercept.NewInterceptAddress(service, port.GetProtocol(), resolver)
...
"-p", interceptAddr.Proto(),
...

tproxy_linux.go

The UDP intercept is still hard-coded. It was moved upwards in the call stack (to tproxy_linux.go#L292 when intercept cleanup was fixed (ziti-edge#24)