Implement kernel_ipsec_t.bypass_socket() via JNI and VpnService.protect()