Choosing IPsec as the standard is a good start, but when it gets to the operating system built-in clients, things get more complicated.