There should be an option to let `protomask` store NAT table entries on disk and pick them up again after a restart.