coreos-kernel: re-add iptables NAT modules

NAT support was mistakenly dropped in commit a5deb9a7 due to changes in
config option naming between 3.16 and 3.17.
Merge pull request #943 from marineam/nat

coreos-kernel: re-add iptables NAT modules