There is no need to have 3 buttons to enable pfkey protocol. Especially a button that is only enabling the protocol.
Found by jmc@ because of the manpage bits -- :wq Claudio Index: share/man/man4/options.4 =================================================================== RCS file: /cvs/src/share/man/man4/options.4,v retrieving revision 1.249 diff -u -p -r1.249 options.4 --- share/man/man4/options.4 30 Apr 2017 20:09:28 -0000 1.249 +++ share/man/man4/options.4 26 May 2017 19:57:21 -0000 @@ -408,10 +408,6 @@ This option enables IP security protocol See .Xr ipsec 4 for more details. -.It Cd option KEY -Enables PFKEYv2 (RFC 2367) support. -While not IP specific, this option is usually used in conjunction with option -.Em IPSEC . .It Cd option MROUTING Includes support for IP multicast routers. Multicast routing is controlled by the Index: sys/conf/GENERIC =================================================================== RCS file: /cvs/src/sys/conf/GENERIC,v retrieving revision 1.243 diff -u -p -r1.243 GENERIC --- sys/conf/GENERIC 20 Apr 2017 14:23:53 -0000 1.243 +++ sys/conf/GENERIC 26 May 2017 19:54:40 -0000 @@ -54,7 +54,6 @@ option TCP_SIGNATURE # TCP MD5 Signatur option ART # Allotment Routing Table option INET6 # IPv6 option IPSEC # IPsec -#option KEY # PF_KEY (implied by IPSEC) option PPP_BSDCOMP # PPP BSD compression option PPP_DEFLATE option PIPEX # Ppp IP EXtension, for npppd Index: sys/kern/uipc_domain.c =================================================================== RCS file: /cvs/src/sys/kern/uipc_domain.c,v retrieving revision 1.50 diff -u -p -r1.50 uipc_domain.c --- sys/kern/uipc_domain.c 9 May 2017 09:37:25 -0000 1.50 +++ sys/kern/uipc_domain.c 26 May 2017 19:55:03 -0000 @@ -56,7 +56,7 @@ struct domain *domains[] = { #ifdef MPLS &mplsdomain, #endif -#if defined (KEY) || defined (IPSEC) || defined (TCP_SIGNATURE) +#if defined (IPSEC) || defined (TCP_SIGNATURE) &pfkeydomain, #endif #ifdef INET6