When a filter triggers a preconfigured sa, pp attempts to create a preconfigured sa for each trigger. After the first trigger, packets for the same action should simply be dropped.
