[PATCH v4 1/6] session: Install SNAT rules only once per device