branches: 1.1.8;
From Cyrus Rahman: Allow interface reconfiguration when running in privilege separation mode, document privilege separation

Apply patch (requested by manu/spz in #378):
Downgrade ipsec-tools to 0.7.1nb1.