Why is IPsec so hard to use ?

Openswan