ipsec: remove dead code