ah, so keepalive is more about making sure NAT doesn't drop it from the table?