Split out the ipsec API surface and use framework-connectivity-tiramisu

boot/hiddenapi/hiddenapi-max-target-o.txt

core/api/current.txt

core/api/module-lib-current.txt

core/api/system-current.txt

core/api/system-lint-baseline.txt

core/api/test-current.txt

core/java/android/app/SystemServiceRegistry.java

packages/ConnectivityT/framework-t/Android.bp

...android/net/ConnectivityFrameworkInitializerTiramisu.java

packages/ConnectivityT/service/Android.bp

...ctivityT/service/src/com/android/server/IpSecService.java

services/java/com/android/server/SystemServer.java