read COREOS_PRIVATE_IPV4, fixes broken cbfs config
make cbfs sanity check stricter