/* copy old ipsec policy into new */