How does key validation work?