The appearance of a new protocol might stall whoever is watching until it is completely reversed engineered or decrypted (there must be a sizeable quantity of "sphinx and ghost traffic on the Web, with unknown specifications, final destination, and encryption status, which can baffle even entities such as the NSA, at least for a while).