This change automatically enables the IPSEC_TUNNELS mandatory feature
for devices launching with or above Q.

This is for OEM convenience to ensure that they do not have to add the
feature for each device that they ship.

Bug: 156711979
Test: Removed feature from device, CTS tested
Change-Id: I9d1a0e9616cdc7089a9bef7c96ff3780de36ed8d
Merged-In: I9d1a0e9616cdc7089a9bef7c96ff3780de36ed8d