Looking at the source code of PVE it looks like adding untag 1 is done in all cases :
https://github.com/proxmox/pve-common/blob/master/src/PVE/Network.pm#L235
$tag = 1 if !$tag;
eval { run_command(['/sbin/bridge', 'vlan', 'add', 'dev', $iface, 'vid', $tag, 'pvid'...