When you configure IPSEC preferred peer with DPD and the default peers drops, it would fall back to the next peer mentioned.
Manual intervention (clear crypto) was required to force it back to the primary peer as the SA's never used get deleted
However with the recent releases i have seen that this happnes but takes a longer time (about 3-4 minute)
HTH
Narayan