xfrm: optimize ipv4 selector matching