ipsec: add udp-encap option to debug cli commands