netfilter: xtables: check for standard verdicts in policies