ikev2: Apply extensions and conditions before starting rekeying