netfilter: nf_tables: reject destroy command to remove basechain hooks