netfilter: conntrack: Use flags in nf_ct_tmpl_alloc()