IKEv2 responder (east) replies with unknown critical payload in SA_INIT

West gets to try and connect.

Of course, including a critical payload in a response violates the RFC.