Comment 5 for bug 1465444

The issue is that we are processing negatives as slices in the list, which gives a behavior similar to:

http://cdn.pasteraw.com/i2bc865nfdmva65vckdkt3sqioc2i9s

In our case, I don't think we'd want to bother continuing if the slice is negative, since that would mean that the repository contains less keys than what CONF.fernet_tokens.max_active_keys has set.

We could propose something like:

http://cdn.pasteraw.com/b46zmja0n61un7qamaofbrpbk4shr1j