mkvbox: set nixpromisc allow-all on hostonlyif