ipsec: Improve the handling of NAT-T keepalive messages