[ Lillehammer: We now have implementation experience, and agree that this solution is safe and correct. ]