From the description summary you provided alone, it seems likely that each Connection could get it's own virtual Interface, which would be dynamically created a

From the description summary you provided alone, it seems likely that each Connection could get it's own virtual Interface, which would be dynamically created and destroyed and the Session keys exchanged initially with the primary Interface key.