This tests VPN-style Opportunistic Encryption.

East is configured to do OE to the westnet.
Sunrise is alive on the westnet. It has two IPs: .1 (not OE) and .3 (OE).

First the .1 is pinged, and we confirm that, due to the lack of OE,
that communication does not occur.

Then the .3 is pinged, and we confirm communication does not occur, even
though there are keys for .3 in DNS.

Note that west is configured to pass in the clear to east from westnet.

