secure by default
sendMessage and server ack impl