A check refused a row I had just added. The row was a retired signing key, kept so that records signed under it can still be read. The check said: refused scheme_outside_the_set scheme=keyed_sha256 schemes=["ed25519"] The set of accepted schemes has exactly one element, and a published limits document says so in one sentence. The retired key's scheme is not that element. The check was right. Three places a deprecated value can go option what happen...