arm-linux: restrict rootfs NFS export to local network