It seems that NDK and nsecbunkerd both don't consider relay URL part of connection URL. Moreover, it's unclear that the relay URL part should be URL-encoded or not. And so on...