ipsec: secrets shouldn't be world-readable
Merge branch 'upstream'