Basically all callers want dual-stack-if-possible, so simplify that. Also, tweak the startup-time checking in kubelet to treat "no iptables support" as interesting but not an error.
pkg/kubelet/kuberuntime/logs
k8s.io/cri-client