ipsec: validate number of input sas