Comment by Jedd

My understanding is the initial handshake is not terribly secure, and sniffers watching that can obtain the long term key used by the pair forever.

But I gather a third party can force a handshake refresh at will, which may be what they're doing here. Code's available. : )