only add VM chains if VM firewall is enabled