iface: managed interfaces are internal by default