shorewall: add bridge support for LXC