An nftables migration looks successful and one rootless service still loses egress

A host firewall migration is completed and later one rootless service can no longer reach external systems although general host egress still works.