Comment 9 for bug 1968369

I think the best approach may be to re-process all broker requests in the upgrade-charm hook, which should allow us to pick up updates like this there, and ensure that the latest permissions are updated onto keys.