Test CREATE_CHILD_SA to create additional Child SA, with nhelpers=0 and pfs=yes

The crypto work will be done inline.
West has two connections to east. Both will share one IKE SA.