man: Document replay_window ipsec.conf option