frontend checks to invalidate keys that were issued before the last time the domain key was updated - #599