defconfig: enable CONFIG_NETFILTER_XT_TARGET_SECMARK, CONFIG_NETFILTER_XT_TARGET_TCPMSS