Dedicated key, pinned host keys, forced command restrictions, generation/payload ACK match, duplicate replay, lost ACK replay and 10-second service were proven.