handle session-key renegotiation