I think I'd rather give DummyDTLSSession a different name - maybe TemporaryDTLSSession or UnverifiedDTLSSession, but like with DTLSClientSession vs DTLSSession I don't want to clutter up DTLSSession constructor deciding not to set anything up if it's a dummy session