kernel: avoid flow offload for connections with xfrm on the dst entry (should fix...