[devops] ensure key destinations exist