configs: Enable XFRM interface support

The XFRM_INTERFACE option enables "a virtual interface to route IPsec
traffic". Add that as a module, enabling statistics and "sub policy"
at the same time.

See: https://github.com/raspberrypi/linux/issues/5446



Signed-off-by: Phil Elwell <phil@raspberrypi.com>