improved CHILD_SA output for "ipsec statusall"