the member is used to pass struct socket to ip{,6}_output for ipsec decisions. (i agree it is kind of ugly. we need to modify struct mbuf if we are to do better - which seems to me a bit too much)