IPsec: better expose PFS option

[andre8244]

Feedback from users course regarding PFS in IPSEC.

Currently we managed it this way with default 2048 bit (DH-14)

This way the PFS option (that is usually in a separate box) is a little hidden and very likely will lead to many support requests.

Changes:

• move the PFS label near DH group

[andre8244]

Testing image version: 23.05.3-ns.0.0.5-rc2-6-gda79335

[gsanchietti]

Verified.