When setting an IPsec tunnel, the completion is only available for IKE and ESP groups that are already commited, which is quite annoying if you are setting up a peer that needs new IKE and ESP groups.