snat: thread safe (VPP-443)