manage trusted and untrusted session keys