add Linux fwmark setting '-K <arg>' to match iptables rules or policy route rules

This works on Linux 2.6.25+ (when the SO_MARK was added as a socket option).

This is nice for testing specific paths through a Linux firewall.

I didn't add any usage.