So there are 2 options
- Live it as it is, it works as before (but maybe it is a legacy way)
- Return the strongswan.service and use it in all required places (conf-mode, op-mode, dmvpn scripts, etc). So old ipsec/starter must not be overlapped with strongswan.service restarts