fix exception punt for SPI=0 over UDP to work with vectors >=2 packets

[gilesheron]

fix to ipsec_if_in.c to rewind correctly for exception punts when dealing with vectors of >=2 packets

(existing change #20128 only works once down to the last packet in the vector)