keys, trusted: fix: *do not* allow duplicate key options