Removal of MLS/security label requirements from the current IPsec specs will interfere with several IPsec implementations and will increase yet again the number of real-world problems that IPsec does not solve. -Craig