child-sa: Don't update outbound policies if they are not installed