This depends on EAP7-649

In general at the outset this RFE should be the minimal required on top of EAP7-649 to be compliant with EE security most likely using a much from the RI as possible meaning this feature should be more about integration. If issues are found using the RI we can always choose to address those later.