[ipv6-wg] RIPE-501 and IPSEC on CPEs