libipsec: Pass separate inbound/update flags to the IPsec SA manager