It seems that they have an internet in mind where you consider packets that left the country to be less secure than ones which stayed in the country.
One way to implement that would be something like RFC 3514, except that the E bit gets set whenever a packet crosses a border, and never cleared.