This tests VPN-style Opportunistic Encryption.

East is configured to do OE to the westnet.
Sunset is alive on the westnet. It has two IPs: .1 (not OE) and .3 (OE).

First east pings westnet's .1, and we confirm that, due to the lack of OE,
that communication does not occur.

Then east pings westnet's .3, and we confirm communication does not occur, even
though there are keys for .3 in DNS.

Note that west is configured to pass in the clear to east from westnet.