examples/ipsec-secgw: add check for unprotected port mask