examples/ipsec-secgw: fix outbound codepath for single SA