kalua: netfilter: stop() only store wired clients for auto-reapply after boot