iptables: opt-out of lto usage