netfilter: nftables: Do not run chains in the wrong network namespace