netbird/client/firewall/nftables/state.go