Which this reply on that SE confirms https://security.stackexchange.com/a/210181