kernel: add a bridge feature for filtering BPDU packets on ports