nftables: Add derivation