Add IP_NF_FILTER to our list of kernel reqs (docker/docker#8960)