How to ACL fragmented packets with doca_flow?

How to ACL fragmented IPv4/IPv6 packets with doca_flow? It is possible to do that at least when the whole L4 header is in the first fragmen? Is it possible to drop packets whose L4 header does not fit in the first fragment?