ARC: better diagnostics for keyfile issues