[root@db1 ipsec.d]# ipsec newhostkey --output /etc/ipsec.secrets --configdir /etc/ipsec.d/ --verbose --random /dev/urandom --password
/usr/libexec/ipsec/newhostkey: WARNING: file `/etc/ipsec.secrets' exists, appending to it
[root@db1 ipsec.d]# cat /etc/ipsec.secrets
: RSA	{
Usage:	rsasigkey [--verbose] [--random device] [--configdir dir] [--password password] nbits [--hostname host] [--noopt] [--rounds num]
	}
# do not change the indenting of that "}"