Never include SADB_X_EXT_REMOTE_AUTH (which is either a passphrase or an RSA key) in the reply message.  There's nothing that justifies this behavior and PF_KEY RFC prefers to exclude keys and other sensitive material from replies.
Never include SADB_X_EXT_REMOTE_AUTH (which is either a
passphrase or an RSA key) in the reply message.  There's
nothing that justifies this behavior and PF_KEY RFC prefers
to exclude keys and other sensitive material from replies.

Discussed with reyk, no objections from deraadt.

orumin/openbsd-efivars,orumin/openbsd-efivars,orumin/openbsd-efivars,orumin/openbsd-efivars