xfrm: prefer secpath_set over secpath_dup