Allow specification of the SA mode

This option determines when the connection should be established.  See
the manpage of ipsec.conf(5) for more information on this.

This work allows the user to specify the mode.