coreos-kernel: re-add iptables NAT modules

NAT support was mistakenly dropped in commit a5deb9a7 due to changes in
config option naming between 3.16 and 3.17.