vpp-swan: allow SAs to be used to the route-based IPsec