ikev2: IKE plugin manages the state of the protected tunnel interface