enforce_recommendation inserts TNC group membership rules for IKE_SA