firewall4: drop kmod-ipt-nat from CONFLICTS