trap-manager: don't check-in nonexisting IKE_SA if acquire fails