luci-app-firewall: don't allow configuring src_mac for snat rules