wireguard: do not add host-dependencies if fwmark is set