NAT reservations support for Netfilter

This module implements reservation of manips, which won't be allocated
by the Netfilter NAT subsystem except explicitly requested. It can be
used in NAT helpers for complicated protocols, for example it may be
needed in case the protocol's command channel requires negotiation of
the exact endpoints of the data channel, and both of them need to be
translated.
