Delegation token: implement optional session key encryption.