Hmmm, never mind. In model (a) connection latching is to be enforced by key management at latch and child SA creation time. That is what must change in the processing model to allow a description of model (a).