Which statement describes the function of rekey messages?

Which statement describes the function of rekey messages?

A.
They prevent unencrypted traffic from passing through a group member before registration.

B.
They refresh IPsec SAs when the key is about to expire.

C.
They trigger a rekey from the server when configuring the rekey ACL.

D.
They authenticate traffic passing through a particular group member.