Add dh_open. Remote send is all under cap_enter()