ipsec: handle UDP keepalives