ipsec: fix esn handling