Hello! From the source code I see that when strongswan uses TPM2.0 chip it uses TSS System API (SAPI) without sessions. Does the strongswan maintainers have plans to switch to Enhanced System API (ESAPI) which enables easier session handling and encrypting transmission on the wire to the TPM chip? Best regards, Piotr Parus