The string was coming from check_reload_status wrapped in quotes that were not necessary, and were causing the string to not match when it should have.
Related issues
Bug #13076: Marking a gateway as down does not affect IPsec entries using gateway groups
rc.ipsec: Strip bonus quotes. Fixes #13076
The string was coming from check_reload_status wrapped in quotes that
were not necessary, and were causing the string to not match when it
should have.