ikev2: Wipe (optional) shared secret during CHILD_SA key derivation