Initiate consumes a child_sa reference, so get an additional one.