a26923
Two patches from Paul Moore to for ipsec to remove redundant rules and have setkey read the config file.