[PATCH v3 1/6] session: Install SNAT rules only once per device