ipsec: Fix setting the hi-sequence number for decrypt