xfrm: policy: convert policy_lock to spinlock