Address ENG-8218.

Old Tunnelbroker sessions should be terminated when primary backup is restored (to avoid having both old and new primary device connected at the same time).

Depends on D13226, D13228

Repeated plan from D13228, now by spawning the Tunnelbroker task in Identity