protect against newly created user who doesn't have 'key_ids' yet