Documented the strict flag (!) for ike and esp options in ipsec.conf.