This tests addconn orientation with XFRM/NETKEY.

It includes testing a --replace while a 0.0.0.0/0 tunnel is in place to
see if we pick the right for nexthop=%defaultroute

It also tests shutdown to see leak detective reports