I'm sorry, all it took was to disable PFS. PFS prevented future SA's from happening due to a policy mismatch.