more carefully check keys/username data and allow retrying