a26923c
Two patches from Paul Moore to for ipsec to remove redundant rules and have setkey read the config file.