New netvirt classifier handling already classified packets on egress

New netvirt classifier is intercepting packets meant for a SF on egress. The problem is on table 221, where supposedly any packet that has not just being classified should return to the egress dispatcher:

New netvirt classifier not setting tun id to 0 when egressing to SFF

cookie=0xf005ba1100000003, duration=1214.452s, table=221, n_packets=256, n_bytes=28672, priority=260,nsh_mdtype=1 actions=goto_table:222
cookie=0xf005ba1100000003, duration=1214.452s, table=221, n_packets=1, n_bytes=42, priority=250 actions=resubmit(,220)

nsh_mdtype=1 is being used as a flag of recently classified packet but it is not an appropiate one, as packets being handled by SFF logic will also have that set.

An alternate option is to set a magic value into CX on the ACL flow, like 0xFFFFFFFF. This will flag a just-classified packet, and reset it afterwards.