app-admin/supernova: add keyring dep restriction