c617298659
before testing the key flags. XXX Problems remain. Nick Hudson points out my questionable XXX M_COPY_PKTHDR usage. Also, it seems to me that we may not be XXX protected against writing a read-only mbuf during the crypto XXX encapsulation stage, even if hardware does the actual crypto.