starts new session after allow to support persisted joined status
so new session starts either if new long terms keys (join)
or short term keys (allow) or both