vrrp: Extend IPSEC-AH auth to support unicast

If you plane to use IPSEC-AH auth in unicast mode (which THE best idea), then
IP header TTL MUST be zeroed since it is mutable field on transit.