documentation: fixup subnets= man page
ikev1_natt= option: we cannot check state yet on responder

We process the natt payloads before we create a state.
packaging: debian updates based on rsuarezsoto's report.
Merge branch 'master' into github_master