ipsecalgs needs a dependency upon filesystem
The ipsecalgs service tries to start very asynchronously, which is ambitious. It doesn't operate properly if /usr/ hasn't been mounted, or if devfsadm hasn't been to populate the right thing in the kernel. We should make it wait until regular local filesystems are mounted.
(We ran into this as a result of our unique distribution, which uses a split /usr. I imagine that SmartOS could run into the same problems as well.)