we have pointers... use them
make sure we always have a session to work with
support the trust-address flag
fix possible segfault
handle "use-candidate" properly