fixup! determine swan implementation prior to calling ipsec_stop()