making "keys" member a sub-collection (relational) in _protected model. fixes strange problems with serialization/deserialization.