fall back to reauthentication if IKE rekeying fails with NO_ADDITIONAL_SAS