strongswan only has two options for NAT-T, force or auto.
use tabs rather than spaces, as most of this already did.