Use ipsec_DATA destination