@MartinK: well said. For now, I have removed the keys from the source and made new ones for services that allow multiple keys. Keys are injected at rpm build time by a small script

Let's see if this will help and whether such accident was one-off.