switch to having the sig value on opens be encrypted too, so packets aren't identifiable at all