limit all networking changes to non-OpenVZ clients