 -		return path.Join(k.dir, "sealed_keyset")
  	}
 +
-+    return path.Join(k.dir, "sealed_keyset")
++	return path.Join(k.dir, "sealed_keyset")
  }
  
  // DelegationPath returns the path for a stored signing key.

 
 	var err error
 	if k.keyTypes&Signing == Signing {
@@ -864,41 +865,41 @@ func NewTemporaryKeys(keyTypes KeyType) (*Keys, error) {
 		k.VerifyingKey = k.SigningKey.GetVerifier()
 	}
 

 // private key. This is copied from the Go crypto/x509 source: it just uses a
 // simple two-element structure to marshal a DSA signature as ASN.1 in an X.509
 // certificate.
@@ -780,79 +786,79 @@ func UnmarshalDeriverProto(ck *CryptoKey) (*Deriver, error) {
 // A Keys manages a set of signing, verifying, encrypting, and key-deriving
 // keys.
 type Keys struct {
