added possibility to route CHILD_SAs, without to set them up

support for auto=route parameter
	support for ipsec route and ipsec unroute
	initiating of CHILD and/or IKE_SAs based on kernel acquires

src/ipsec/ipsec.in

@@ -174,6 +174,10 @@ route|unroute)
 	then
 		$IPSEC_WHACK --name "$1" "--$op"
 	fi
+	if test -e $IPSEC_CHARON_PID
+	then
+		$IPSEC_STROKE "$op" "$1"
+	fi
 	exit 0
 	;;
 scencrypt|scdecrypt)