IPsec: Default to rekey=no