With loadable secure-messaging module the SM wrapping of APDUs is performed by entity external to the running application. So that the SM keysets TODO: amend detailed description