The subset check is cool (i.e. that the right keys are returned) but a length check is important too to catch out-by-one errors.