Only add Wireguard kernel module on Kernels that do not already have it

This makes wireguard work on older kernels (19.09 nixos), i.e.
our storage servers currently) and newer kernels (21.05, i.e.
the monitoring server).