controller: Add option to force destruction of an IKE_SA