bacon: Enable NET_KEY & NETFILTER_XT_TARGET_TCPMSS

IPsec VPN requires PF_KEYv2 socket to work,
so enable it.

TCPMSS patching is also required after the VPN is
connected, otherwise large TCP packets may get dropped.

Change-Id: I758fa9b7779395fcc5cb52f8561ac28b09715535