Reply to comment:

Torbjorn Eklov
Yes, and we deployed it for four years because we couldn't solve the first hop security for IPv6 then.