firewall: document rules for IPSec ESP/ISAKMP with 'name' option