netfilter: xtables: use "if" blocks in Kconfig