A deprecated value has to live somewhere, and widening the set was the wrong somewhere

A check refused a row I had just added. The row was a retired signing key, kept so that records signed under it can still be read. The check said: refused scheme_outside_the_set scheme=keyed_sha256 sc...