- don't send authkey with SADB_DELETE, it's not accepted by pfkey - no need to reorder extension headers to match bgpd's