I use transport-mode IPsec on NetBSD (by configuring the SPD).

With any luck one of us will write the code to use GSS-API to wrap all
the coda traffic.  I haven't gotten around to it, and am not likely to soon.

-- 
        Greg Troxel <gdt_at_ir.bbn.com>