Rework PCB SP cache to avoid races.

Add ipsec_cachepolicy() and ipsec_invalidate_cache() functions that
implement the cache logic. Use INPCB lock to protect access to the cache.
Also, now SP are kept in the cache referenced. This protects from access
to already freed policies.