nftables helper tracking is disabled globally, and active FTP works only until a maintenance reboot restores the stricter default

The fix looked stable, but it only lived in transient runtime state and did not survive policy reload.