In all places we use this Callback we only access the session anyway.

In the only place we would currently register the factory we only have access to the SSLSession.