Actually follow the protocol spec when rekeying.