(cherry picked from commit 5f65d541)

(cherry picked from commit f5cedec5)

(cherry picked from commit 8d28488f)

(cherry picked from commit 5b67fa4a)

(cherry picked from commit b48122f9)

Backend can't call tainted code that may run configd again.  This needs
to be cleaned up.  Ideally, the backend should only call python code.

(cherry picked from commit 4f43181d)

(cherry picked from commit cc7aeef0)

Spotted by: @fabianfrz

(cherry picked from commit 14c63733)

(cherry picked from commit 0a8876ed)

(cherry picked from commit 9fe4591d)

(cherry picked from commit 6eb68e2e)

(cherry picked from commit 03c31498)

(cherry picked from commit 4deca554)

Not sure we'll ever hit this, make it more vague, although
IKE is pretty much either this or that.

Spotted by: @fabianfrz

(cherry picked from commit c7e5c37a)

(cherry picked from commit 971c7831)

(cherry picked from commit af8f5ab0)

Spotted by: @fabianfrz

(cherry picked from commit 10a9a5e2)

(cherry picked from commit bc37482f)

(cherry picked from commit 852b7e71)

(cherry picked from commit 77e37862)

(cherry picked from commit 397ba442)

(cherry picked from commit 1fd5d463)

(cherry picked from commit 3677ab28)

(cherry picked from commit 644e864e)

(cherry picked from commit b5fab9ee)

(cherry picked from commit 5c1c7b94)

(cherry picked from commit 3676f8f1)

(cherry picked from commit 17d8b4e0)