Update inbound ESP processing.

Use struct xform_data to pass needed information from esp_input()
to esp_input_cb(). Protect access to SA replay window structure and
cryptoid by acquiring SA lock. Set M_AUTHIPDGM mbuf flag if
authentication was performed