Enabling NAT changes the size (and layout) of some structures, so while it is theoretically possible for a module to patch every function in the kernel to work with the new structure, it is not going to happen. For kernel space NAT you need a different kernel.