API changes to support delayed key erasure