security: extend userdata for IPsec events