Clarify when keys are created Upstream-commit: 871daf5498b4211a23ca5150444ed713d8cfd1d7 Component: engine