The current number of security associations (SAs) for
this tunnel. Typically there will be 2 SAs (1 inbound and
1 outbound) for a tunnel in the 'up' state. During dynamic
tunnel rekeying there may be 0 to 4 SAs on the tunnel since
IKE removes the current SAs and adds new SAs.