netfilter: nf_nat: fix inverted logic for persistent NAT mappings