Or the list used contained keys that weren't actually weak debian keys?