empty keys must be kept out of SHA calculation