Change pubkey-based routing (now renamed non-ephemeral routing ids) to use a shared secret. And perhaps only enable it at all for encrypted connections?