config-policy: do not unlink other endpoints when linking one with keep=true

keep=true should work in both ways:
* keep the endpoint with this property linked at all times
* keep other already linked endpoints when linking this one