Properly compare CHILD_SAs during rekey collision