As responder, enforce the same configuration while rekeying CHILD_SAs