netfilter: don't pull include/linux/netfilter.h from netns headers