[Bluetooth] Fix reference counting during ACL config stage