ipsec fixes & other cleanups

Are you sure this `ipsec addconn` should be dropped?