netfilter: nft_ct: prepare for key-dependent error unwind