ikev2: Responder honours the protected tunnel config