xfrm: clone mark when cloning policy