flesh out veb(4)/vport description a bit, spell out in more words what
is meant by "independently of the host network stack"

feedback jmc dlg

fix up which link flags do what.

ipsec code is written, but is disabled, so the ipsec words here are
still commented out for now.

try and use my words to explain what veb is and does.

ok jmatthew@