implemented the policy cache in kernel_netlink_ipsec_t with a hash table instead...