<<ipsec --ctlsocket whack ...>> vs <<ipsec whack --ctlsocket ...>>

bug in 5.0
