mkcloud: fix NAT of public net

this was NATed before as part of the enlarged admin net