When Centralized Access Control is configured as Automatic, when is a user data tunnel created?

A.
when more than one controller is on the network that has the same access control configuration

B.
when tunnels are manually configured and available

C.
when IPSec is set up between two controllers

D.
when a synchronized AP and its controller are on different subnets