Each client uses a different session encryption key but that is negotiated using the shared PSK.