Describe how key exchange should be performed in a secure manner