acl-plugin: add whitelisted ethertype mode (VPP-1163)