bpf: enforce recursion limit on redirects