Add key restrictions