IPSEC: correctly size per-thread data