ipsec: fix combined counters in ah-encrypt node