clone key for updates (points to leafentry and never got copied).  For non-broadcast, use the message's copy of the key