heldKpids property
Every address this client can be reached at — the active key's and every retired key's.
A sweep filters on these rather than on kpid alone: a sender that read the package before a rotation addresses the superseded key, and an envelope this client never scans for is one it never opens.
Implementation
Set<String> get heldKpids => {for (final held in _encKeys) held.kid};