netfilter: nf_tables: restrict anonymous set and map names to 16 bytes