NEWS: Mention replay_window ipsec.conf option