NSIM_IPSEC_VALID
xs->xso.offload_handle = sa_idx | NSIM_IPSEC_VALID;
sa_idx = xs->xso.offload_handle & ~NSIM_IPSEC_VALID;