+* connections fail if transport-plugin/nat produces
+ some addresses that don't work (enable 'use_localaddr' with bindto for example,
+ so that some of the 'local' IPs do not work due to the bindto); the result
+ seems to be that the plugin tries some of the broken addresses, fails and the
+ transport-level connection never comes up.
+ [still an issue?]
+* transport:
+ - explicit CONNECT: add timestamp
+ - explicit DISCONNECT: add signature