Kernel: Enable SHA-2 algorithms by default
Build: Support building IPsec kernel modules

Add IPSEC=y to target config to enable.
iptables: Enable IPsec "policy" match support.