The current number of security associations (SAs) for all
the tunnels on this interface. Typically there will be 2 SAs
(1 inbound and 1 outbound) for each tunnel in the 'up' state.
During dynamic tunnel rekeying there may be 0 to 4 SAs on a
tunnel since IKE removes the current SAs and adds new SAs.