Add some scenarios to `keys_spec`

There are probably some scenarios not accounted for.

What if key doesn't exist?
What if trying to update private key with public key contents?
What if trying to update public key with private key contents?
Others?
