NetBSD IANZAG 2.0G NetBSD 2.0G (IANZAG) #0: Tue Jul 13 22:38:35 NOVST 2004  
toor@IANZAG:/home/ianzag/NetBSD/current/build/obj/i386/sys/arch/i386/compile/IANZAG 
i386

Some utilites like ping(8) explicitly uses IPSEC define like:

CPPFLAGS+=      -DIPSEC
LDADD+= -lipsec
DPADD+= ${LIBIPSEC}

On the other hand ping builds just fine without IPSEC and in some cases IPSEC 
support isn't required.

Maybe it's not so bad idea to add MKIPSEC option on bsd.own.mk and guard this 
sections ? Like MKINET6 does.

// wbr