netfilter: add support for flushing conntrack via /proc