netfilter: nf_tables: disallow rule removal from chain binding