ipsec: fix padding/alignment for native IPsec encryption