clarify that tenant public keys are reset when deltas are applied