cipso: handle CIPSO options correctly when NetLabel is disabled