Comment 14 for bug 1938571

So this is an incorrect assumption.

There is one /run, so there is one shared ctl - thus *one* pluto

ipsec whack --shutdown kills the daemon via the ctl, thus kills the *one* pluto instance

Which explains the error messages:
https://paste.openstack.org/show/bJQDomD1IbOgUZrUImhQ/

I have let neutron-vpnaas create it's own pluto instance and shut it down via ipsec whack --shutdown from another namespace...