Separate crypto link from session for tunnel impl.