ipsec_conf_add
ret = ipsec_conf_add(just_check, smf_managed, replace_policy);
static int ipsec_conf_add(boolean_t, boolean_t, boolean_t);