Feedback from Joe:
1. I think this is a bug, we see Example NMState IPSEC Transport config twice. - https://docs.openshift.com/container-platform/4.15/networking/ovn_kubernetes_network_provider/configuring-ipsec-ovn.html#nw-ovn-ipsec-external_configuring-ipsec-ovn

2. In the docs' butane config example, we reference a ipsec-endpoint-config.conf that isn't defined/or provided an example... This is somewhat confusing because we create the nmstate ipsec config right above this one.