kernel-netlink: Set SPI on outbound policy