Per-App VPN, how are CCU licenses consumed?

If you get a chance to take a look at SOL13267, it gives a table that describes what does and doesn't count toward CCU usage.

And as far as I know, each one is per connection. So each unique session will consume up to 1 ccu.