use IP_SELECT_IDENT_NEW for kernel 3.12 series
while the uid  and pid types changes for namespace support since 3.12,
rather than fix that, KLIPS really does not need to know the PID at all.
Compile out the pfkey /proc interfaces; they provide no value
use a more KLIPS-y way to detect if KLIPS is loaded; not ancient pfkey interface