ipsec: skip may be zero in IPv4 handling, but must not

ae@ says skip should not be needed anymore and is supposed to
always be the size of the IPv4 header.  The IPv6 code already
handles this more robustly so simply update IPv4 accordingly.