configs: Add NET_XFRM=m

Enable the net_xfrm module to support using nftables rules with ipsec
matches,

See: https://github.com/raspberrypi/linux/issues/5171



Signed-off-by: Phil Elwell <phil@raspberrypi.com>