[NETFILTER+IPSEC 4/4]

This patch makes xfrm_policy_check locate the correct policy after NAT.
