What about support for `esp` and `ah` protocols (IPSec)? :) They seem to be supported according to the man page.