manager can query and list IKE_SA status (no layout yet)