expanded the key validation problem to be a general 'key management problem'