moved encryption keys from TunnelPool to StreamingDestination