cas: only succeed if there is 1 keyprefix match