Bugfix: Must verify at least CMAC to consider ourselves to be inside a secure channel.