Only add a reflexive address when we're sure it's working.