iptables: enable nftable support by default