Does the current implementation provide Perfect Forward Secrecy? Either way, it would be helpful to document what users can expect.