- adding security enhancements to meet server side practices - best effort RSA Key protection for ephemeral keys - AES in memory protection