Old systems will reject the key if compatVersion is set.
compatVersion will be set for now, only if the key+payload length exceeds the old max (0x7fff).