[RFC patch 0/2] nwfilter: don't query netfilter inside transactions