kernel: describe bridge patch "optimize netfilter hooks"