crypt_keeper has worked around the dirty record issue