Clarify registry updates (keys, signatures, encryption updates warrant different registries)
Clarify registry updates (two registries for new key version, separate registry for encryption types)
This cleans up a confusion that i introduced in 56bd8559