netfilter: nf_tables: add optional user data area to rules