Which two descriptions of the keying mechanisms that are used to distribute the session keys used in routing authentication are true?