Do not log error message in ipsec_init_pcbpolicy(). This code is invoked
from PCB layer and PCB usually doesn't reports errors via syslog.
I think it is enough to return proper error code.