hmm.. I don't see a big issue of what could be exploited without the filter. It shouldn't find the keys anyway so nothing should go through..