let's only set --dhcp-authoritative for the nat interface