[ratling]

You're essentially losing PFS if you do this, since those keys are now available. This would work, though it would probably have to be at the application level.

[gruez]

>(hashed, limited to the last n connections)