thus dcb leaks privacy bits, like all server-client negotiable features.