ipsec: extend vnet coverage in esp_input/output_cb

[mjg]

Summary

key_delsav used to conditionally dereference vnet, leading to panics as
it was getting unset too early.

While the particular condition was removed, it makes sense to handle all
operations of the sort with correct vnet set so change it.