recently i've committed some changes to correct IPsec policy reference
	counting.  did it change stability of ipsec?
	is it stable even if you define IPSEC_PCBCACHE (IPsec policy caching
	code for inpcbs)?  if we have improved stability, i would like to
	re-enable IPsec policy caching code by default, as it will be important
	for performance (we scan IPsec policy table for every packet by nature,
	so caching is rather important).

itojun