kernel-pfkey: Also use interface returned by get_nexthop() for IPsec policies