[PATCH 2/2] domain_conf: Don't leak def->os.firmwareFeatures