Tinc: only run lokkit if firewall in use

GDB-671