add note about --nat