improved key validation

Signed-off-by: Tim Henderson <tim.tadh@gmail.com>