key_allocsa
sav = key_allocsa(&dst_address, sproto, spi);
sav = key_allocsa((union sockaddr_union *)&icmpsrc, proto, spi);
struct secasvar *key_allocsa(union sockaddr_union *, uint8_t, uint32_t);
sav = key_allocsa(&dst, IPPROTO_ESP, spi);