ikev2: better handling when no IKE DH configured