Why is IPsec so hard to use ?

OpenBSD isakmpd.conf(5)