ipsec: esp-encrypt and esp-decrypt cleanup