Generating strongswan.conf.5.main in a subshell gets the file properly written to the builddir in out-of-tree builds.