Prevent MAC spoofing from Ganeti instances by managing ebtables rules