SubnetTier: ensure PORT_FORWARDING_MANAGER config is set