indentation fix
Don't stomp on existing saved key strength
save nonce for reauth in PrivateAttributes
spec says echo nonce also for mutual auth