This patch adds kernel support for goto type jumps.

With this type of jump, the calling chain is not added to the call stack when the new chain
is called.  As a result, when a RETURN target is encountered, or evaluation runs past the end of
the called chain, rule evaluation will continue at the chain _previous_ to the calling chain
instead of the calling chain.

If there is no previous chain (ie. the calling chain is a built-in chain), the chain's default
policy will be enforced.

The following new options are added by this patch:

  -g CHAIN
  --goto CHAIN

