When we have {A,B,C} and A is killed, B and C never end up with the same view. (This works when A leaves gracefully).
The sample config is attached as asym-encrypt.xml