IPsec: propagate security module errors up from flow_cache_lookup