ipsec: Failure at the start of the batch should not invalidate the rest of the batch