IPSEC: improved policy delete