ipsec-wrapper: export the defnix checkout