methods on the key broker use either a key id or a keyAltName, and the way we have handled this is a bit clunky. Consider making key descriptor a struct that can contain either type, for better comparison and handling.