ipsec: add SAD add/delete/lookup implementation