[ffulm] added missing iptables modules for TEE target
[ffulm] make config replacements actually happen on first boot