added a "purgeike" command to stroke, deleting all IKE_SAs without a CHILD_SA