ipsec_id_size
sz = ipsec_id_size(rs, &id_type);
sz = my_id ? ipsec_id_size(my_id, &id_type) : sockaddr_addrlen(src);
extern ssize_t ipsec_id_size(char *, u_int8_t *);