Change 338984 had a related patch set uploaded (by Volans):
Keyholder: fix filter of passwordless keys

https://gerrit.wikimedia.org/r/338984

@mmodell I'm not sure what's the status with the https://phabricator.wikimedia.org/source/keyholder/ repository that was recently created.

I've sent the patch against puppet repo as usual for now. See also the other related patch in T158659

@Volans: Thanks for the heads-up. We still use the code from puppet in prod. It will will remain that way until I get the package accepted by ops and change puppet to use the keyholder package from apt.

Change 338984 merged by Volans:
Keyholder: fix filter of passwordless keys

https://gerrit.wikimedia.org/r/338984

Mentioned in SAL (#wikimedia-operations) [2017-02-24T14:27:37Z] <volans> re-started and re-armed keyholder after upgrade on: mira.codfw.wmnet,neodymium.eqiad.wmnet,sarin.codfw.wmnet,tin.eqiad.wmnet T158660 T158659