ipsec: move inbound and outbound code