The roadwarriors carol and dave set up a connection each to gateway moon. moon uses whitelisting to grant access to carol with ID carol@strongswan.org whereas since ID dave@strongswan.org is not listed, dave gets rejected.