secmark: fix config problem when CONFIG_NF_CONNTRACK_SECMARK is not set