ipsec: cli bug fixes