flow: Use bit-mask for TTL match, instead of FWW_* flag.