if the pubkeys is too many, clients should split it into multiple requests.