netfilter: nf_tables: disabling table hooks always succeeds