netfilter: make security table depend on NETFILTER_ADVANCED