https://ma.tt/2003/03/open-keys-update/