netfilter: nf_tables: add quota expression