netfilter: xt_quota: use per-rule spin lock