Hello Todd,
I don't think you can for the nature of dot1q tunnel.
You cannot define a set of vlans to be tunneled or not on the port.
You will need a separate physical interface not configured for tunneling to support this specific request.
Hope to help
Giuseppe