limit to one cleartext session