fix #2358: allow --<opt> in firewall rule config files