Nevermind, it sounds like this is in *addition* to an api that lets you get the set of all keys on the device. So it is just a convenience for the (probably common) case where the caller is only testing for a particular key.