kernel-arm: Enable Xtables HL match, to be in-sync with MIPS