So at this moment, most applications ask for more than the 'active key'? It does, of course, make sense to use this key, but it does make it too risky. The innovation of having multiple keys is that you can choose what amount of trust you give away. Apps should only require the active key, no?