The nftables package started honoring the rule position (insert vs. append), and it turns out our goldens have been wrong all along. Now the configured order matches the golden order.
