[NETFILTER] NAT: Fix module refcount dropping too far