I really like their Edge devices, particularly the ability to enforce a distributed firewall. However, it really isn't clear to me how their crypto works. They

I really like their Edge devices, particularly the ability to enforce a distributed firewall. However, it really isn't clear to me how their crypto works. They use PK to do something, and traffic is encrypted with a symmetric cipher. How are nodes authenticated to join? It isn't clear from their description. They don't do PFS, it seems like there is no key rollover at all? Maybe I'm just obtuse, but I don't think they have explained it very well.