basic OE test, using road and east triggered by packet using KLIPS on road

This also triggers OE to 7.7.7.7, so that we can test it shows a
proper %pass during/after IKE failure with opportunistic.

keyingtries=1 in private-or-clear to trigger faster IKE failure

issues:

shows two shunts?

000 192.1.3.209/32:0 -0-> 7.7.7.7/32:0 => %pass 0    oe-failed
000 192.1.3.209/32:0 -0-> 7.7.7.7/32:0 => %pass 0    oe-failed

shows no %pass ?

 ipsec look
road NOW
192.1.3.209/32     -> 0.0.0.0/0          => %trap
192.1.3.209/32     -> 7.0.0.0/8          => %trap
192.1.3.209/32     -> 7.7.7.7/32         => %hold
192.1.3.209/32     -> 192.0.2.0/24       => %trap
192.1.3.209/32     -> 192.1.2.0/24       => %trap
192.1.3.209/32     -> 192.1.2.23/32      => tun0xIPIP@192.1.2.23 esp0xESPSPI@192.1.2.23
192.1.3.209/32     -> 192.1.2.253/32     => %pass
192.1.3.209/32     -> 192.1.2.254/32     => %pass
192.1.3.209/32     -> 192.1.3.0/24       => %trap
192.1.3.209/32     -> 192.1.3.253/32     => %pass
192.1.3.209/32     -> 192.1.3.254/32     => %pass
ipsec0->eth0 mtu=16260(9999)->1500

