strongswan: Use --wait option for iptables commands