MPLS VPN failover via Ipsec

Hello, we have a requirement to have a backup connectivity via Ipsec in case our MPLS P2P fails. I am trying to figure out how to do this since there are multiple vrf's involved.
The easiest way to achieve this would be to haveaBGP over ipsec per vrf and control the routing through BGP policies. But that would mean creating an Ipsec VPN for each vrf ?
Is there any easier way to do this ? Looking for some suggestions.

Thank you !