IPSEC: some CLI fixes