So review our key handling practices, but it's still impossible (or deprecated) to actually have good ones...?