kernel-netlink: Add an option to enforce using XFRM_MSG_UPDPOLICY