r2859: It seems useful to allow the seal/unseal functions in gensec to pass