extra ec_key checks