netfilter: keep 8-bit API for 32-bit NAT dir attribute