Add ipsec-wrapper functionality impl
Add decrypt-secrets nix-exec function