xfrm: change secpath_set to return secpath struct, not error value