Authenticating gateway

[Tom Danielsen]

Hello,
is there an easy-to-implement way to have the gateway authenticate
each outbound connection?  Somewhat like authpf, but
    1. authenticate to gateway
    2. gateway adds rule
    3. one (1) outbound connection
    4. gateway removes the rule, but keeps the state entries

regards,
Tom