xfrm: use secpath_exist where applicable