@mix spot on! that is for the connection handshake.

would messages from A be valid in B?

yes they would. I think what you want for that to be false is the caps.sign. IIRC that is what gets fed to sign/verify obj in ssb-keys as hmac_key but havent used this yet myself.