netfilter: nf_tables: NAT chain and extensions require NF_TABLES