The text a8277103b8f8, as Debian 10 (Buster) shipped it.
see if a target IP address would get encrypted or not
ipsec_show(8) on Linux now