fixing checkout of IKE SAs with only the initiator SPI