add hwclock service, enabled only for physical hosts