xfrm ipsec-interface, but with ipsecN hidden inside a namespace
