ipsec: Support 4o6 and 6o4 for SPD tunnel mode SAs