NPF_CONNKEY_V4WORDS
offsetof(npf_conn_t, c_keys[NPF_CONNKEY_V4WORDS * 2]),
KASSERT(off == NPF_CONNKEY_V4WORDS || off == NPF_CONNKEY_V6WORDS);