only return valid identity keys