ikev2: proper cleanup of SAs during rekey