The keys can always be generated via account name & password. So it wasn't dangerous that the keys weren't correct, but I was still appalled that I missed it to have the code update the keys if the password changes.