netfilter: nf_nat: place conntrack in source hash after SNAT is done