during authentication we need to use both local profile id + remote profile id to uniquely identify the tunnels to support multiple remote peers