Adding note on unauthenticated end-of-session messages.