handle keys more flexibly to auto-sha them, and check decloak requirements carefully
bump ver 0.0.14