Could you be really specific about this, do you mean that we need a triple to define a security association, i.e. <spi, dst addr, protocol> -> security association ??? That would be quite surprising.