vici: Support a replay_window CHILD_SA option