This patch adds the policy match to netfilter.

The policy match is used to match the IPsec policy
used for handling a packet.

The 2.4 version is for use with the 2.6 IPsec backport.
