Harden interior net filtering rules

We need to hardness the net filtering installed by default with Ateom to isolate Actors from the Node. For example, prevents access to instance metadata, Kubernetes node ports and the host network namespace.