Added a check to make sure the xfrm policy has not yet been updated to a new spi. The ipsec mutex is held at this point so nothing else should be modifying this policy.
weave expose