This makes some issues on bootup when nhrp tries to configure the ipsec tunnel to the hub before ipsec is fully up.
As for priorities nhrp starts with priority 740, and vpn with 900.
This isn't a problem on every bootup, but it is a race between who's finished at first..