ignore net none netfilter protocol unix,inet,inet6 private-etc resolv.conf,ca-certificates,ssl,pki,hosts,crypto-policies