moved force_encap to ike_config, enables responder to enforce udp encapsulation