I think let's leave point two for now -- I think checking a subset of the user keys is likely to be fairly common.