Fair enough. I just operate under the assumption deleted means deleted, I’d never toss Auth keys in userspace but I could absolutely see myself placing them temporarily in scripts I’d delete later.

Honestly this should be treated as a security vulnerability as well as a general bug, no?