Notes about using long-term keys for reauthentication