netfilter: ip6t_NPT: restrict to mangle table