add SENames API, and a "protocol" matcher to go with it