af_key: mark policy as dead before destroying