ipsec auto --replace conn_name ipsec auto --add whatever ipsec auto --rereadsecrets - make pluto re-read secrets