No magic SHA-1 or PGP keys