child-sa: Use flags to track installation of outbound SA and policies separately