ipsec: fix tunnel protection removal