fix strongswan certs copy from pki server
add localhost to ipsec group