func saExists(sa *netlink.XfrmState) (bool, error) {
    _, err := ns.NlHandle().XfrmStateGet(sa)
    switch err {
    case nil:
        return true, nil