Ipsec differences between devices: is kmod-crypto-ctr the problem?

qce hw-crypto breaks ipsec, disabling CRYPTO_HW is needed.