luci-proto-wireguard: add warning that allowed_ips must not be empty