examples/ipsec-secgw: add cryptodev mask option