defaults: add support for setting --hw on the xt_FLOWOFFLOAD rule