Fix KeyChainGroup.toString double keys output
Work done can never be negative. Assert for that fact, because we've seen negative values in the wild.