examples/ipsec-secgw: try end in flow actions before fail