[IPSEC]: Move state lock into x->type->output