Per #6791, even when removing all the STUN addresses, there is no strong guarantee that all user <-> workspace traffic will flow through a relay. We should add a flag (maybe --disable-direct or --network-mode=[direct,relay]) that serves this specific purpose.