don't delete iptables-nft in container cleanup