add multi key support

better exception messages

better key verification

only split on newline

use verbose config section

simplify key verification

remove redundancies

make expired keys explicit

key is required