[IPSEC]: Kill post_input hook and do NAT-T in esp_input directly