Allow comparing connection/child configuration with reported status about strongswan

[jlearman]

I realize this isn't a trivial request.

Incidentally, we started with Libreswan and moved up to Strongswan, which I find superior to Libreswan in every way except this one. While Libreswan reported state in a different structure (text output from whack), the item values used the same format as in the configuration, so doing the audit was cumbersome due to parsing text, but otherwise straightforward. The vici interface is vastly superior, but the change in the format of configurable values is difficult to resolve.