Also, for improved security in load-balanced shared hosting environments, the signed handshake finalization message from the server should have an optional set

Also, for improved security in load-balanced shared hosting environments, the signed handshake finalization message from the server should have an optional set of ECDH/RLWE/etc. values so that the load balancer and the server can cooperate to allow the load balancer to MITM the connection, but then negotiate a key unknown to the load balancer before the connection goes into an authenticated and encrypted state.