netfilter: nf_tables: enable conntrack if NAT chain is registered