This is not true any longer (and required for L2TP+IPsec)