Similar to ikev2-x509-01, but with less hardcoded keywords and id's

East does *NOT* have West's X.509 Cert locally.  west is FORCED to
send it. And visa versa.

This configuration does not set any left/rightca=, ID's or any
left/rightsendcert= option. It should still come up successfully.
