ipsec: T1925: Fixed show vpn ipsec sa output
After the a1aaf4fb9c0e4111670ef3dd491796fa35a2311f commit, only single
(latest) CHILD_SA for each connection can be displayed in the
show vpn ipsec sa output. This commit backs the proper behavior for
the command and adds a little optimization to the formatter to make it
easier.