hooks: add nftables to the /var exception

BUG=chromium:1058604
TEST=CQ passes

Change-Id: Ia48ca207b9c47396197f309f1265af17af37fef2
Reviewed-on: https://chromium-review.googlesource.com/c/chromiumos/platform/crosutils/+/2088118
Reviewed-by: Denis Nikitin <denik@chromium.org>
Reviewed-by: Chris McDonald <cjmcdonald@chromium.org>
Commit-Queue: Mike Frysinger <vapier@chromium.org>
Tested-by: Mike Frysinger <vapier@chromium.org>
diff --git a/hooks/filesystem-sanity.py b/hooks/filesystem-sanity.py
index e13ee72..0e0da32 100755
--- a/hooks/filesystem-sanity.py
+++ b/hooks/filesystem-sanity.py
@@ -112,6 +112,7 @@
     # TODO(b/150694545): Delete this.
     'net-firewall/ebtables',
     'net-firewall/iptables',
+    'net-firewall/nftables',
     'net-fs/samba',
     'net-misc/chrony',
     'net-misc/dhcpcd',