@jimp OK, thanks, makes sense.
But it might be helpful to do either of these two things:
allow the use of PSKs defined there in regular IPSec configurations rename the tab to something like "Mobile Pre-Shared Keys" or something similar, that makes it clear, that these are not intended to be used for regular IPSec setupsbecause otherwise, it's a bit confusing...