ipsec: missing curly braces led to always false return