This is userspace side of 'rt ipsec' support. It allows e.g. to suppress NAT for packets that will be tunneled via esp. For symmetry it might make sense to rename 'meta secpath' to 'meta ipsec', what do you think? Old keyword would be presevered of course.
