ipsec_stackmanager is called from within the init sub-system (systemd, upstart, sysv initscripts) to
bring up the Libreswan kernel component as configured via the protostack= option in the ipsec.conf
configuration file.
This involves loading and optionally unloading of the required kernel modules. Because the Linux kernel
cannot autodetect most crypto related drivers on-demand, _stackmanager handles loading the modules for
the specific IPsec stack.
When the --xfrm option is given to the start command, the XFRM stack is loaded regardless of the
existence or contents of the ipsec.conf file. This is used for docker tests where the host system, which
might not have libreswan installed, needs to run _stackmanager from the source tree to load the modules
on the host so the modules are available inside the containers.