Lack of opportunistic encryption (in the style of Hugh Daniels Free S/WAN). General complexity and baroqueness. IKE and various implementations -- keying in g

Lack of opportunistic encryption (in the style of Hugh Daniels Free S/WAN). General complexity and baroqueness. IKE and various implementations -- keying in general. True, keying is a hard problem, but I'd prefer a simple default which was secure against passive eavesdroppers, and then progressively better systems.