api: ipsec: add missing IS_INBOUND flag.