Typo.  `namespaced.cf.sub` has `classes => default:always("ns1ppkeys")`.  Fixed.

(this is exactly why I want `dcs_passif_expected`, to avoid these stupid typos)