That looks like a code snippet from rc.subr checkyesno(), a stable source. Clever work. Thanks.

In D19367#414863, @jlduran_gmail.com wrote:

The only reason I can think of is to partially migrate connections from stroke to vici. In that case, the user will need to manually invoke swanctl --load-all, keeping the strongswan_interface in stroke. This will load both configurations from ipsec.conf and swanctl.conf.