Tunneling model of proton glasses