Is there any further information on secure renegotiation?  e.g., is it on by default or do you need to do something to include / enable (or disable) it?  Does (or can) the application need to do something to trigger it, e.g., after so many bytes or time, etc.?  Or does the library handle it transparently?