at the end. This is done so that they take precedence over "bad" when
being processed in key files. If bad keys are processed after good
keys, there is a possibility of malicious bad key causing good keys to
be continually removed from key files, which would be a big nuisance.