ensure all fixed traffic is routed via main table
add basic host-based firewall with guard
enforce security groups in tenancy as well
restart all dnsmasqs and libvirt when bouncing openstack svcs