SPA for linux integrated into iptables.  I've included a modified spa client which accepts keys via stdin, and is therefore scriptable.