ike-sa-manager: Signal entries that we don't actually check out