{nl,cfg}80211: add a flags word to scan requests