I think that's the gist of it, but I'll refresh my memory later. Hard agree on the docs.

Yep, when I receive a tunnel.connect with those args, I just start trying to SHS with binary messages on that request.