child-sa: Add methods that allow partial installation of CHILD_SA