kalua: hotplug: allow DNS from private wannet