mixed IKEv1/IKEv2 scenarios require socket-raw