ipsec4-output: add pkt header and data prefetching