Perhaps it makes sense for the "Run automatically at startup" checkbox to actually start the tunnel.

Or this can be split into two checkboxes:

• Launch app at startup
• Start tunnel at startup (depends on the first)