ipsec: ipsec-if optimizations & bug fixes