If I edit a host-to-host IPsec interface with automatic encryption via racoon and modify the authentication key, it updated /etc/sysconfig/network-scripts/keys-<name> but not /etc/racoon/psk.txt.
Never mind. ifup-ipsec modified psk.txt when the interface was brought up.