basic-pluto-01 but now with labeled IPsec using NETKEY. A test on port 4300
using netcat and getpeerconn daemon to confirm traffic flow and label.

(requires private getpeercon package, we'll include it as source in /testing soon)

A shutdown is issued to verify no kernel state is left behind