Merge "UPSTREAM: iptables: open eBPF programs in read only mode" am: 87dcb9c3c6

Change-Id: If65ec98a2306b6eb4f1656174262633f8a25871b