netfilter: nfnetlink_queue: allow to attach expectations to conntracks