xfrm: Force a dst refcount before entering the xfrm type handlers