[strongSwan] roadwarrior user groups

[Daniel Pocock]

Are there any specific mechanisms for grouping roadwarriors into
different groups?

For example, let's say that all mobile devices are to be allocated
virtual IP addresses from pool A and all laptop devices are to be
allocated virtual IP addresses from pool B.

One solution appears to involve creating different CAs (or intermediate
CAs) and using the leftca or rightca parameter.  However, this is quite
rigid in other ways (e.g. no device can be in two logical groups for
some other purpose)