netfilter: nf_tables: disallow updates of anonymous sets