qa: build unshared nfct environment

nssocket forks and change netns pre-establishd by ip(8), serves its socket
descriptor to parent via nssocket(). Since this socket is isolated, I think it
is suitable for test. see example, ct_tcp_event.c

Signed-off-by: Ken-ichirou MATSUZAWA <chamas@h4.dion.ne.jp>