Lifetime of shunts with negotiationshunt=hold and failureshunt=passthrough

This test is similar to newoe-4 except it uses negotiationshunt=hold for
private-or-clear

To ensure we see the negotiationshunt, we allow more keying tries and
slower/longer retransmit intervals