"add localhost localhost esp 9999 -E des-cbc hogehoge" adds two keys, for 127.0.0.1 and ::1
note th at the file will not be installed into locations like /usr/sibn or /sbin.
IPsec manual key before /usr mount.. (based on "don't use cvsmove" discussion i have seen, I did not use cvsmove)