Comment by cyberax

> would never have worked in userspace macOS or windows

It could have worked in macOS! It implements RFC-2367 (PF_KEY socket type) and I even made it work on my laptop.

I traced the SA database operations on Windows, and it could have been done. Probably. But I abandoned that to preserve my sanity.