[NETFILTER]: nf_nat: mark NAT protocols const