ipsec: need these flags to get handshake to work