netfilter: make /proc/net/netfilter pernet