May we have an example of Server Name Indication (SNI) filtering on the nftables wiki? When using an environment without the variable position support of iptables string match, an example, maybe using eBPF, for SNI filtering with nftables would be helpful.