ipsec: move the IPSec SA pool out of ipsec_main