[FabHK]

That would indeed be enough. The other conceivable scenario is that the server gets compromised (and suppresses the "delivery receipts", then sends a spurious "rekeying" message).