Complete the transport-neutral PKI session composition and expose all
currently implemented administration capabilities through typed direct
and batch operations.
Preserve explicit optional capabilities, KeyRef confinement, deterministic
lifecycle handling and reuse by the future persistent server.