examples/ipsec-secgw: check SP only when setup