Implement ESA rekeying with and without PFS