Implemented a checkout/checkin mechanism for IPsec SAs