improve autorebuild for iptables when the kernel config changes