ipsec: API cleanup