ipsec_clone_system_policy
error = ipsec_clone_system_policy(ns);
extern int ipsec_clone_system_policy(netstack_t *);