Fix possible double releasing for SA reference.

This is missing part of r318734. When crypto subsystem returns error
the xform code handles an error independently.

PR: 221849
MFC after: 5 days