kernel-netlink: Use ipsec_sa_cfg_equals() and compare marks properly