does isakmpd(8) actually use this and the other ipsec-* sysctls? ip.ipsec-enc-alg has been aes for as long as i've ever noticed it and it seems isakmpd always wants to use 3des for as long as i've known about it (perhaps because it performs an explicit default of the BLHABLH-3DES-BLHABLA like the isakmpd.conf(5) page says).
-- jared
