ipsec: clear L4-cksum flags when decap'ing packets