Bugfix: check allowed_bootstrap keys