I created a patch in T260917 that merges hiera keys with keys from private:
- https://gerrit.wikimedia.org/r/c/operations/puppet/+/631720
- https://gerrit.wikimedia.org/r/c/labs/private/+/631724
- https://gerrit.wikimedia.org/r/c/labs/private/+/632515/
When running PCC on that change, the diff does not show the additional keys test: data and defaultsecret: notdefault for the files zotero/staging.yaml and zotero/private/secrets.yaml.
The change catalog contains the changes and no corresponding warnings or errors where raised.