Updates, keys, and groups

Depends on https://github.com/coreos/coreos-overlay/pull/570