Add LXC iptables pre-start hook