validate keys given to :uninstall

this should also be part of audit