vpn.inc calls functions from ipsec.inc but doesn't actually include it in all cases where it's needed.