acl: verify that src and dst have sane and same address family