ipsec: multi-arch, next-node-index cleanup