examples/ipsec-secgw: implement inbound SAD