expect user records to only have 1 public key