trust entire lxc network, finally