don't add init flows until first packet