Clarify the distinction between *m.key.verification.start* and its *m.sas.v1* variant.