openCursor takes range, not keyRange.