just for clarification why I send this patch alone. I think it is easier to get this patch merged before we talk about the vpn security policies. Make my branches easier and the emails shorter. This method works fine and results in an error every time something goes wrong. The message should be enough o encounter what the problem is.
So hopefully this one is ok :-)
Jonatan