"add localhost localhost esp 9999 -E des-cbc hogehoge" adds two keys, for 127.0.0.1 and ::1
IPsec manual key before /usr mount.. (based on "don't use cvsmove" discussion i have seen, I did not use cvsmove)