iptables: rework ip(6)tables-nft dependencies