kernel: fix kmod-ipsec load order (#12552)