added poor man's ipsec