Soundness of using ConnectInfo for Per-Connection state

[2ndDerivative]

Hello people!
I wanted to ask the more cracked of you if you're seeing any holes in my idea to use ConnectInfo for per-connection state like a Kerberos authentication state.

I implemented a middleware with it axum-negotiate-layer, which works so far (on Windows at least, sorry..), but wanted to ask if there might be any soundness holes in doing that. From what I saw the connect-info gets created once per connection, but I'm not 100% sure if that's guaranteed.

Thanks!