IPSec: fix decryption broken in g8cd167a