ipsec_used is not necessary condition. IPsec outbound policy will not be checked when ipsec_used is false.