When adding a new SSH key to a user’s profile, key validation might accept malformed keys: https://pdsls.dev/at://did:plc:6ll5xi67lyuyovt6fiv4fnjo/sh.tangled.publicKey/3lwlkst2pjn22
Strings that are deliberately malformed are correctly refused, while strings that contain e.g. multiple pubkeys are accepted, and the resulting record string contains both of them in the key field: https://pdsls.dev/at://did:plc:6ll5xi67lyuyovt6fiv4fnjo/sh.tangled.publicKey/3lwll72k2u222